Siemens Solid Edge

🗓️ 14 May 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 41 Views

Siemens Solid Edge product vulnerabilities will no longer receive updates from CISA after January 10, 2023. The vulnerabilities include heap-based buffer overflow and out-of-bounds read allowing arbitrary code execution

Reporter	Title	Published	Views	Family All 84
BDU FSTEC	The vulnerability of Siemens Solid Edge, a design and modeling tool, relates to buffer overflow in the stack. This allows an attacker to execute arbitrary code.	24 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.	24 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.	24 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.	3 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.	3 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to buffer overflow attacks in the “cull” mechanism, allowing attackers to execute arbitrary code.	3 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.	3 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code.	3 Oct 202400:00	–	bdu_fstec
CNNVD	Siemens Solid Edge 安全漏洞	14 May 202400:00	–	cnnvd
CNNVD	Siemens Solid Edge 安全漏洞	14 May 202400:00	–	cnnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-589937.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-589937.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-589937.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-589937.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-137-09.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-137-09
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

14 May 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.8

EPSS0.00295

SSVC